This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
File:                     OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json)
Hash identifier:          Xcw1E4GmP/uABDToPaVbIadYZLbghMKEAmbBYKJnCtQ=
Subject key identifier:   B8:87:E9:70:66:A4:E8:F2:DC:97:26:3E:4E:8F:89:18:DD:A4:AB:C1
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       0481
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
Manifest number:          044F
Signing time:             Sun 25 Jan 2026 03:28:44 +0000
Manifest this update:     Sun 25 Jan 2026 03:28:44 +0000
Manifest next update:     Tue 27 Jan 2026 03:28:44 +0000
Files and hashes:         1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: xTSapeRiL6L3TgYsExYSgylFpbB/YnNAavNmF7n+dVE=)
                          2: 8C47E5A0ED3E11F0A72275E1DAE4EC9C.roa (hash: nB5KiaQO+9VuJNjpZ9f6AXWqs3oXtXsb/43LRUuOS8k=)
                          3: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=)
                          4: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=)
                          5: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=)
                          6: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=)
                          7: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=)
                          8: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=)
                          9: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=)
                          10: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=)
                          11: E44287A0E1A511F09B8305AFDAE4EC9C.roa (hash: i0YqrCk3d9f/RPOZqg04E/KSYN7esrzd1BRKHLmfxzk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Jan 25 03:28:44 2026 GMT
            Not After : Jan 27 03:28:44 2026 GMT
        Subject: CN=69758dec-587d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:66:18:fe:88:70:bf:97:ce:75:e1:e9:e7:
                    97:cf:24:bf:5d:ab:99:d5:af:f7:9a:ca:12:06:c7:
                    7e:86:8e:57:e4:79:0d:19:df:be:ed:23:e6:e3:83:
                    37:a7:b1:03:56:06:60:a6:6c:ef:8d:71:f9:06:0d:
                    2e:60:81:c7:9b:f6:3e:ad:97:46:1e:7c:83:30:c6:
                    da:8f:4f:40:b0:dc:e5:44:4e:bf:8d:63:c4:93:79:
                    25:74:f9:df:89:1b:51:d9:d5:3e:64:6b:33:18:61:
                    b1:f4:12:e6:b1:c1:f7:fb:06:49:66:1a:16:e2:ad:
                    98:32:74:31:cd:0c:00:55:53:1a:a0:41:dc:d7:ea:
                    fd:eb:64:35:79:53:04:11:fa:a7:ca:34:33:79:f0:
                    f5:d0:80:9e:62:93:a5:53:57:1b:a7:70:ae:d2:ae:
                    43:be:67:05:d9:b0:a8:55:10:52:e9:7b:b4:c0:c4:
                    72:67:2e:45:d3:a9:0d:3c:42:f8:20:63:5b:be:65:
                    05:8b:05:1a:1b:48:ac:23:e3:46:44:a9:dd:2b:86:
                    d8:34:8d:b1:28:c5:6a:3d:2d:30:d7:fa:65:91:46:
                    da:32:61:8f:7c:55:d2:07:d9:b5:72:39:1b:d6:fe:
                    35:4f:00:62:ec:8e:9f:37:08:ab:90:71:db:b7:20:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:87:E9:70:66:A4:E8:F2:DC:97:26:3E:4E:8F:89:18:DD:A4:AB:C1
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8e:c5:77:32:d3:39:ed:8d:d4:fa:19:85:05:19:4e:96:48:
         b7:f2:32:57:da:04:5f:5a:f9:a3:5a:12:e0:cc:3a:f2:f3:42:
         15:9a:c3:9b:e3:4e:53:fe:76:82:4e:30:5d:69:b1:f1:52:2d:
         b6:31:0f:56:5f:ab:de:76:c2:a9:be:f1:99:f8:2b:1e:27:ab:
         8f:79:9a:af:1e:0d:47:3a:b4:fd:c4:b2:32:05:0b:e8:fc:47:
         4e:f4:2a:ba:2c:88:27:42:e5:a0:e7:0f:90:f8:2d:c9:df:95:
         19:90:f6:e1:79:a6:8b:2d:d4:ee:a7:a9:4b:c3:94:76:7b:6b:
         af:e2:66:e8:9f:ed:60:eb:27:bc:66:7f:b7:3f:be:2c:44:24:
         a9:7b:df:be:b7:a8:e3:06:52:14:01:e5:1d:01:2e:d3:e1:52:
         66:17:1c:3a:09:86:e9:37:f4:09:bb:f4:62:b0:12:c1:b9:d0:
         9c:28:bb:da:2e:01:64:9c:d7:cf:8a:61:36:e1:eb:3d:4f:a3:
         9a:1c:29:2d:61:74:9c:81:60:fd:1c:9d:8a:ee:b5:42:59:a1:
         3f:a4:56:22:07:9a:ce:a8:d7:52:cf:2d:7d:e3:8b:0d:56:85:
         00:fb:b6:93:47:b9:9f:0b:57:a7:39:cb:f7:9b:ff:40:5a:68:
         47:8c:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:12:27 2026 by rpki-client